Check whether an agent skill, Claude Code plugin, MCP config or AI coding extension is safe before installing it — scans for remote code execution, obfuscated payloads, hidden Unicode instructions, credential or .env access, data-leak endpoints, prompt injection, permission bypass, hooks, MCP servers and install scripts.
Install
npx skills add usmanmanii/realitygate --skill realitygate-scannpx skills add usmanmanii/realitygate --skill realitygate-scan -a claude-code -gnpx skills add usmanmanii/realitygate --skill realitygate-scan -a codex -ggemini skills install https://github.com/usmanmanii/realitygate.git --path agent-skills/realitygate-scangh skill install usmanmanii/realitygate realitygate-scangit clone --depth 1 https://github.com/usmanmanii/realitygate /tmp/usmanmanii__realitygate
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/usmanmanii__realitygate/agent-skills/realitygate-scan ~/.claude/skills/realitygate-scan # Claude Code
cp -R /tmp/usmanmanii__realitygate/agent-skills/realitygate-scan ~/.agents/skills/realitygate-scan # Codex, Cursor, Gemini CLI, Copilot, OpenCode